# Managing Access Rights
URL: https://docs.valsight.ai/managing-access-rights/
Description: The redesigned Access Rights screen lets you review and change who can see and edit projects, models, workspaces, data classes, and presentations from a single matrix.
The redesigned Access Rights screen Beta lets you manage who can see and change projects, models, workspaces, data classes, and presentations from a single matrix.

> This screen is a beta. Turn it on for yourself on your **User Profile** page with the **Use the new access rights view** switch. Access-rights links throughout the application then open the new view; the previous view stays reachable by direct link.

## Turning on the new view

1. Open your **User Profile** (personal configuration).
2. Enable **Use the new access rights view** and save.
3. Access-rights links across the application now open the redesigned screen. The switch is per user — each person turns it on for themselves, and it is off by default.

## The access rights matrix

The screen opens on a matrix of **users and groups** against **objects**. A cell shows the access a holder has to that object. A compact filter bar across the top decides what the matrix contains:

![The Access Rights matrix: a filter bar with Projects, Users and Groups, and Categories, a Pivot Table button and a color legend, above a table of users and groups against a project column showing each holder's access, with Global Admin badges](./images/access-rights-matrix.png)

* **Projects** — pick one or more projects. You can limit the list to **Only Projects I Administer** and **Show Hidden Projects**.
* **Users and Groups** — filter the holders shown, by **All**, **Users**, or **Groups**, or search by name.
* **Categories** — choose which kinds of objects appear: **Projects**, **Models**, **Workspaces**, **Data Classes**, and **Presentations**.

Until you select at least one project and one category, the matrix stays empty and prompts you to make a selection.

Reading the matrix:

* **Holder badges:** each user or group shows its type — **User**, **Group**, or **Global Admin**.
* **Object-specific labels:** a cell's label depends on the object — a project reads **Can use** or **Project admin**, a model **Read-Only** or **Can edit**, a workspace **Limited access** or **Full access**. **No access** means none. See [Access Rights](/access-rights/) for what each level allows.
* **Legend:** explains the colors.
* **Pivot Table:** swaps the axes, so holders and objects trade places between rows and columns.

## Editing access from a cell

Select a cell to open its editor, where checkboxes set the holder's **direct** access to that object. The editor also explains the access it cannot change directly:

![The cell editor popover for a user's access to a project, with Can use and Project admin checkboxes, a Why This Access? section showing the effective access and its explanation, and Edit All Users & Groups, Cancel, and Save actions](./images/access-rights-cell-editor.png)

* **Why This Access?** expands a plain-language explanation of the holder's **Effective Access** and where it comes from — for example *Granted directly*, *Via group membership*, *Project administrator*, or *Blocked: no access to the parent project*.
* When a holder already has access indirectly, the editor notes that the checkboxes set direct access only.
* When a direct grant currently has no effect — because the user has no access to the parent project, or their user type does not permit it — the editor says so.

## Editing all access for a user or group

Choose **Edit Access Rights** on a holder to open **Access Rights of '*holder*'**, which lists every object that holder can reach.

* **Grouped and sortable:** objects sit in collapsible cards by category and project; sort the objects within a card, sort the cards themselves, and use **Expand All** or **Collapse All**.
* **Filter:** narrow the objects by name.
* **No cascade:** **permissions don't cascade to linked objects** — granting access to a model does not grant access to its submodels or project. Set those separately.

![The per-holder editor dialog titled Access Rights of 'admins', with a "Permissions don't cascade to linked objects" warning, a filter box, and a collapsible Projects card listing objects with Can use and Project admin checkbox columns](./images/access-rights-holder-editor.png)

## Editing all access to one object

Choose **Edit Access to This Object** to open **Access to '*object*'**, which lists the users and groups with access to that object so you can adjust them together, with a filter and **Select all**.

![The per-object editor dialog for a project, listing users and groups with Can use and Project admin checkbox columns, a filter box, All/Users/Groups tabs, a Select all row, and Cancel and Save actions](./images/access-rights-object-editor.png)

* **Model links:** removing read access to a model can also remove access to its linked and parent models.
* **Presentations:** owner-only for writing — the owner always keeps write access.

## Changing many cells at once

Select several cells to open the bulk editor, **Edit Access for *N* Cells**.

* **Three-way control:** for each right, choose **Grant**, **No change**, or **Revoke**. The editor shows whether the selected cells currently all, partly, or none have that access.
* **Write implies read:** granting write access also grants read.
* **Apply:** writes the change to every selected cell. Objects you cannot administer are excluded and called out, and a selection larger than the dialog's limit asks you to narrow it.

## Confirmations and safeguards

* **Reaching an object:** when a grant needs project access to take effect, a confirmation lists the users who will be added to the project so they can reach the object — you can **Add to Project & Apply** or **Apply Without Adding to Project**.
* **Your own access:** removing your own access — directly or through a group you belong to — prompts **You Are Removing Your Own Access**, because the affected objects then disappear from your table. Confirm with **Remove Anyway**.
* **Out-of-date values:** if some rights cannot be refreshed, the screen warns that the values shown may be out of date and offers **Retry**.

## Related

* [Access Rights](/access-rights/): what each access level allows per object.
* [Manage users and groups](/manage-users-and-groups/): create the users and groups you assign access to.

The matrix holders are users and groups; object categories are `projects`, `models`, `simulationWorkspaces`, `dataPermissionClasses`, and `workspaceSnapshots`. A cell's effective access is composed of direct grants, group membership, and project role; the cell editor changes direct access only. The bulk editor's per-right control maps to grant / no-change / revoke intents, and write implies read. The opt-in is the `useNewAccessRights` flag on the app user, toggled on the user profile.